$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa File: 67480b46-f29d-3781-9835-105e7c253634.roa (raw, json) Hash identifier: tyZMwKXstyFLFzTjPEAxgPalWXxPz2LThCMv3YqReX4= Subject key identifier: C1:29:A8:03:6E:2B:A2:EC:7B:F6:AB:0C:F4:8C:F8:9F:16:4E:A0:2F Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A9963259CF1BA5A3636F7100 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 32043 IP address blocks: 66.186.176.0/24 maxlen: 24 66.186.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:32:59:cf:1b:a5:a3:63:6f:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ce96c756-53a1-46c1-83b4-5d7307a351a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:55:7e:9a:54:d6:38:6c:08:88:7a:51:53:a6: b2:c9:06:69:78:22:e7:24:31:a7:59:a6:80:cd:5e: 30:81:ca:fe:bb:c2:23:6b:a9:e6:04:f4:a4:fe:60: 3b:16:91:9c:c1:4c:1a:22:7f:2f:0f:47:8c:2c:85: bb:01:0e:c0:b4:93:f4:45:4c:cf:89:66:90:66:11: a2:cd:53:41:ef:ee:5e:0b:e1:7c:64:99:fb:16:26: 27:6b:31:c6:fe:3f:ab:8d:49:e5:4c:8d:af:a4:c5: 8f:b5:2c:3b:27:0f:96:45:90:64:56:88:82:38:63: a8:5b:db:91:55:22:ab:71:a2:38:f3:1e:fb:64:2f: 3a:79:2b:e9:ed:78:2c:a3:c0:aa:a6:61:56:40:fa: 1f:7d:79:9e:09:8d:b7:ad:a5:25:02:4a:28:7e:ba: d3:22:cc:22:ff:c1:03:22:0a:87:cc:3e:02:8b:aa: 79:b8:1d:6e:59:97:b5:12:38:15:10:f5:68:a9:43: a4:ce:f0:2f:82:70:2f:3a:74:7b:ef:0a:cc:50:00: ec:e1:c5:9c:57:ba:c1:e5:e9:2b:a9:bf:cc:4c:ef: 0d:92:f5:db:4f:d6:33:a4:e7:46:9a:3f:6d:4d:01: 6a:bf:bf:3d:31:b8:aa:cd:1e:d2:ea:6a:fa:f9:fe: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:29:A8:03:6E:2B:A2:EC:7B:F6:AB:0C:F4:8C:F8:9F:16:4E:A0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0e:7e:42:e5:6d:b4:ad:a9:a6:d4:bd:3d:f2:a9:18:ea:39: ed:f1:8f:07:5b:3a:95:99:58:e1:26:19:8a:37:83:4e:55:cb: d3:57:31:d8:24:57:1b:75:e9:f3:9b:ff:71:ee:65:5c:ac:33: bb:76:2e:da:a0:16:b0:b7:54:86:20:8e:e3:04:1f:0b:ab:de: c1:17:12:11:bb:66:b8:97:66:60:76:29:bf:58:fa:38:2a:7c: 5a:f3:70:b7:a9:4e:6b:e3:ae:35:61:fe:0a:7e:d4:b2:0d:ca: 0f:b8:e3:7e:99:01:8d:29:31:03:5e:16:47:b0:03:e1:b0:4b: 5f:82:d3:ee:f0:01:f9:35:39:28:d2:b9:94:3c:10:74:05:83: 89:3f:26:88:5d:ac:ed:6b:89:f9:c5:7d:da:81:db:c3:ac:38: e6:56:b5:fd:a3:0a:48:a3:fc:e4:0e:07:e2:41:d6:fa:29:6a: f1:5d:aa:78:4a:e8:12:99:82:ac:c3:cb:49:97:eb:5b:93:2f: 22:4d:42:82:f9:79:4b:b3:79:b6:18:92:91:8d:a1:fd:51:92: 17:f2:08:c3:f6:53:a2:2e:5e:b3:17:cb:34:27:68:f4:62:08: d9:d2:32:2c:3b:2b:e6:89:ba:98:9d:8e:f2:01:2f:04:55:b7: c6:54:8b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljJZzxulo2NvcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U5NmM3NTYtNTNhMS00NmMxLTgzYjQtNWQ3MzA3YTM1MWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilV+mlTWOGwIiHpRU6ayyQZpeCLnJDGnWaaA zV4wgcr+u8Ija6nmBPSk/mA7FpGcwUwaIn8vD0eMLIW7AQ7AtJP0RUzPiWaQZhGi zVNB7+5eC+F8ZJn7FiYnazHG/j+rjUnlTI2vpMWPtSw7Jw+WRZBkVoiCOGOoW9uR VSKrcaI48x77ZC86eSvp7Xgso8CqpmFWQPoffXmeCY23raUlAkoofrrTIswi/8ED IgqHzD4Ci6p5uB1uWZe1EjgVEPVoqUOkzvAvgnAvOnR77wrMUADs4cWcV7rB5ekr qb/MTO8NkvXbT9YzpOdGmj9tTQFqv789MbiqzR7S6mr6+f4oTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEpqANuK6Lse/arDPSM+J8WTqAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjc0ODBiNDYtZjI5ZC0z NzgxLTk4MzUtMTA1ZTdjMjUzNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAOfkLlbbStqabUvT3yqRjqOe3xjwdbOpWZWOEmGYo3g05Vy9NXMdgk Vxt16fOb/3HuZVysM7t2LtqgFrC3VIYgjuMEHwur3sEXEhG7ZriXZmB2Kb9Y+jgq fFrzcLepTmvjrjVh/gp+1LINyg+4436ZAY0pMQNeFkewA+GwS1+C0+7wAfk1OSjS uZQ8EHQFg4k/JohdrO1rifnFfdqB28OsOOZWtf2jCkij/OQOB+JB1vopavFdqnhK 6BKZgqzDy0mX61uTLyJNQoL5eUuzebYYkpGNof1RkhfyCMP2U6IuXrMXyzQnaPRi CNnSMiw7K+aJupidjvIBLwRVt8ZUi28= -----END CERTIFICATE-----Generated at Fri Apr 11 23:22:52 2025 by rpki-client